$ rpki-client -vvf rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft File: ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft (raw, json) Hash identifier: 1Yu5BXqxaFeV4Un9YZH+CTQ4zVjrfH/aa9jLAomVvHw= Subject key identifier: A3:E2:C8:84:AB:BC:51:27:0D:68:19:8A:4C:0F:9C:2E:CA:32:4A:8D Authority key identifier: 4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 Certificate issuer: /CN=A9162FF2/serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Certificate serial: 021E Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft Manifest number: 021B Signing time: Sat 23 Aug 2025 02:11:22 +0000 Manifest this update: Sat 23 Aug 2025 02:11:21 +0000 Manifest next update: Sat 30 Aug 2025 02:11:21 +0000 Files and hashes: 1: ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl (hash: uM8hUwYOeilGS1pcFMqHaT1Cd00RXiTAZ78mIeLjuN0=) 2: 1A302138448311EDB0572C4CC4F9AE02.roa (hash: 91vo57eXpy+XLfc+60pdKiOcpCWF0pprhkB0No7XRi4=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 30 Aug 2025 02:11:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 542 (0x21e) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9162FF2, serialNumber=4E83DB81EAE5602475783C11BCE9D3550CD3D544 Validity Not Before: Aug 23 02:11:21 2025 GMT Not After : Aug 30 02:11:21 2025 GMT Subject: CN=68a9234a-d7b4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:7c:56:26:b9:1d:68:1f:59:25:f5:7b:ae:ad: ec:68:0c:f6:cf:e6:42:21:77:92:d0:46:31:26:16: f1:63:3e:3f:41:d9:94:2c:21:2c:2b:7d:48:42:0a: 48:29:10:3e:d7:04:50:c9:39:b5:71:07:26:dc:d0: de:fa:a7:7e:f5:f8:7d:fe:e2:62:c7:e8:b9:14:74: 9d:7e:fa:3c:65:74:4b:22:7e:a7:29:64:8e:0d:d6: 6e:e7:81:1e:f9:41:20:45:b0:e6:83:aa:80:62:bc: ae:9e:23:f2:f2:9f:11:04:ec:02:3f:88:17:79:26: 0f:8f:ed:14:16:e4:ab:8b:e9:f5:24:ff:dd:91:73: c0:4f:01:91:bf:f7:72:42:f8:ab:a3:0d:7f:84:64: 19:0c:56:4f:4c:1c:54:48:de:ac:36:5f:3d:97:ae: 6f:9b:9e:1a:82:32:ec:30:5e:be:6d:44:88:4e:5c: b4:72:c7:07:ca:03:cf:51:7d:42:29:5d:99:d3:eb: ef:41:bc:a3:6c:1d:dd:94:b4:46:c1:7a:20:e7:b1: e6:36:85:90:59:46:86:a9:09:24:00:df:93:c3:4d: 60:aa:5e:c1:f4:76:97:fb:ce:a3:00:c5:38:4d:9b: 53:56:ff:44:21:f7:b1:2a:bc:a3:a7:7e:1b:af:7f: 5b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:E2:C8:84:AB:BC:51:27:0D:68:19:8A:4C:0F:9C:2E:CA:32:4A:8D X509v3 Authority Key Identifier: keyid:4E:83:DB:81:EA:E5:60:24:75:78:3C:11:BC:E9:D3:55:0C:D3:D5:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToPbgerlYCR1eDwRvOnTVQzT1UQ.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9162FF2/3210D6C6447E11ED948D442FC4F9AE02/ToPbgerlYCR1eDwRvOnTVQzT1UQ.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption b8:b7:39:34:63:c5:02:40:ae:da:10:8b:b5:ba:61:80:47:a0: e7:77:e2:34:cc:45:98:92:6e:94:68:07:e7:83:de:b7:7a:0f: b4:60:44:17:3e:bf:d7:4a:5b:ca:cf:ef:1b:de:46:b8:af:4c: 00:68:ba:7f:4c:58:01:61:d7:e8:c2:47:b7:a9:07:bb:f6:9d: fa:af:73:98:11:97:17:2e:9c:a4:a4:26:f8:3e:1b:57:75:c5: 8e:13:38:76:9f:63:15:49:c0:94:0e:e5:54:fd:85:e9:d0:ea: 35:77:d5:80:cf:2e:3d:3b:25:a0:95:f7:33:15:22:0b:de:b2: d5:e1:a1:e6:d0:ae:78:47:48:d5:40:a2:f6:47:02:e0:3a:76: 85:14:34:13:a8:89:62:e0:94:bf:6a:5a:e5:44:0d:53:68:5a: b2:6d:a3:8a:b8:a7:7d:01:39:7d:77:29:af:f8:d8:ee:b6:7b: 43:70:c5:35:1d:d2:44:1e:f9:73:cb:40:15:ee:7f:5a:1c:4f: be:8f:5b:05:86:0c:dd:63:ec:91:8b:e6:bf:c3:0c:a4:8a:08: fb:3d:40:22:59:9f:a3:1b:ab:87:76:06:af:63:44:87:b3:75: d2:aa:ca:83:31:e7:f3:d6:ae:c8:fd:78:8d:f3:02:96:d5:08: b1:d9:a7:c1 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAh4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx NjJGRjIxMTAvBgNVBAUTKDRFODNEQjgxRUFFNTYwMjQ3NTc4M0MxMUJDRTlEMzU1 MENEM0Q1NDQwHhcNMjUwODIzMDIxMTIxWhcNMjUwODMwMDIxMTIxWjAYMRYwFAYD VQQDEw02OGE5MjM0YS1kN2I0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAuXxWJrkdaB9ZJfV7rq3saAz2z+ZCIXeS0EYxJhbxYz4/QdmULCEsK31IQgpI KRA+1wRQyTm1cQcm3NDe+qd+9fh9/uJix+i5FHSdfvo8ZXRLIn6nKWSODdZu54Ee +UEgRbDmg6qAYryuniPy8p8RBOwCP4gXeSYPj+0UFuSri+n1JP/dkXPATwGRv/dy Qvirow1/hGQZDFZPTBxUSN6sNl89l65vm54agjLsMF6+bUSITly0cscHygPPUX1C KV2Z0+vvQbyjbB3dlLRGwXog57HmNoWQWUaGqQkkAN+Tw01gql7B9HaX+86jAMU4 TZtTVv9EIfexKryjp34br39b9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFKPiyISr vFEnDWgZikwPnC7KMkqNMB8GA1UdIwQYMBaAFE6D24Hq5WAkdXg8Ebzp01UM09VE MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MkZGMi8zMjEwRDZDNjQ0 N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlDUjFlRHdSdk9uVFZRelQx VVEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1RvUGJnZXJsWUNSMWVEd1J2T25UVlF6VDFVUS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2 MkZGMi8zMjEwRDZDNjQ0N0UxMUVEOTQ4RDQ0MkZDNEY5QUUwMi9Ub1BiZ2VybFlD UjFlRHdSdk9uVFZRelQxVVEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQC4tzk0Y8UCQK7aEIu1umGAR6Dnd+I0zEWYkm6UaAfng963eg+0YEQX Pr/XSlvKz+8b3ka4r0wAaLp/TFgBYdfowke3qQe79p36r3OYEZcXLpykpCb4PhtX dcWOEzh2n2MVScCUDuVU/YXp0Oo1d9WAzy49OyWglfczFSIL3rLV4aHm0K54R0jV QKL2RwLgOnaFFDQTqIli4JS/alrlRA1TaFqybaOKuKd9ATl9dymv+NjutntDcMU1 HdJEHvlzy0AV7n9aHE++j1sFhgzdY+yRi+a/wwykigj7PUAiWZ+jG6uHdgavY0SH s3XSqsqDMefz1q7I/XiN8wKW1Qix2afB -----END CERTIFICATE-----Generated at Sat Aug 23 17:11:51 2025 by rpki-client